CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2020-12511
High (8.8) in pepperl-fuchs. EPSS 0.6% chance of exploitation in the next 30 days.
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pepperl-fuchs:io-link_master_4-eip_firmware
- pepperl-fuchs:io-link_master_4-pnio_firmware
- pepperl-fuchs:io-link_master_8-eip-l_firmware
- pepperl-fuchs:io-link_master_8-eip_firmware
- pepperl-fuchs:io-link_master_8-pnio-l_firmware
- pepperl-fuchs:io-link_master_8-pnio_firmware
- pepperl-fuchs:io-link_master_dr-8-eip-p_firmware
- pepperl-fuchs:io-link_master_dr-8-eip-t_firmware
- pepperl-fuchs:io-link_master_dr-8-eip_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio-p_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio-t_firmware
- pepperl-fuchs:io-link_master_dr-8-pnio_firmware